Live data from Hacker News

Apple passwords deserve an app

cabel.com

171–180 of 414 posts

Re: Apple passwords deserve an app

#171
post #169

One core feature that will keep lot of people from using Apple Password manager is family setup. Anyone with Apple family knows how bad it can be when you have dozens or hundreds of shared passwords between you, your spouse and / or kids.

Yep. 1Password has my business indefinitely because of this requirement. Apple may be building a nice solution for single people (and perhaps many non-parents), but it's useless for family use.

Re: Apple passwords deserve an app

#174

Earlier quoted context omitted.

Unless Apple ever starts following Google's lead to ban accounts for any infraction and you don't store backups... Not saying Apple is doing that now, but I imagine it's not outside the realm of possibility.

We can use the same argument for any other cloud password manager. If google/Apple blocks my access, well it’s those services I am trying to log into in the first place so the point is moot. Also I have recovery keys for the more important accounts printed and stored in a safe box.

I agree, perhaps I should have emphasized that my point of view is that anyone should back up anything stored on the cloud.

Which I'm glad to know you can at least do with Keychain [1], although I use Bitwarden myself.

[1] https://support.apple.com/guide/keychain-access/import-and-e...

Re: Apple passwords deserve an app

#175
post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

Funny situation, there's another thread I was replying to someone who wanted to shift back to native apps instead of cross plat electron apps (for performance reasons). Well, Apple Passwords on Windows is a good example of how that turns out in reality. I believe it's using WinUI. While the performance is nice, the experience is entirely unlike what you get on Mac and winds up making you wish you were using another s…

> Apple Passwords on Windows is a good example [...] the experience is entirely unlike what you get on Mac

If you were a Windows user, why would you want an app that acts like a Mac app? Surely the benefit of having a dedicated Windows app is that the experience should be like other Windows apps.

Re: Apple passwords deserve an app

#176
post #102

> And it all syncs across your devices, for free?! Really? My Linux devices? Android? Windows? I don't think so. I recommend considering one of the most important features of a password manager is that it doesn't force you to use a single manufacturer's products forever. Even if you swear undying fealty to Apple (or anyone else) today, you might change your mind in the future. 1Password, Bitwarden, and others allow m…

> Even if you swear undying fealty to Apple (or anyone else) today, you might change your mind in the future. Changing my mind is easy enough: I can export my iCloud passwords to a csv file, and I've done this to transfer a bunch of passwords to Firefox Linux desktop. I'll tell you something though: If Bitwarden leaked passwords nothing would happen because America has very weak consumer protections, but if Google or…

LastPass' entire business model was about protecting passwords, and passwords still got leaked. Most prople want security, not "ability to sue" which is not at all the same thing.

Re: Apple passwords deserve an app

#177
post #45

Earlier quoted context omitted.

With passkeys, now every platform can enjoy this level of lock in!

Yeah, that's why I'd never touch passkeys. It feels like you're basically locking yourself into a weird ecosystem that you'll never be able to escape from.

This is kind of silly.

If you're using hardware 2FA, you should absolutely have backups. I've used YubiKeys for years and have one in my laptop, one on a keychain, and one in a safety deposit box.

Passkeys are just another instance of this. I have added Passkeys to all of my accounts with 2FA and it's somewhat more convenient (significantly more convenient for mobile devices). But every account also has all my YubiKeys attached as second factors.

There is no lock-in. And while it's inconvenient and annoying to have to add multiple keys to every account, that is already the reality if you're responsibly using hardware second factors.

Re: Apple passwords deserve an app

#178
I don’t personally care much whether Passwords is in Settings or a separate app. But I do have one problem with it. As far as I can tell, you must save a password for a site in order to use the TOTP 2FA feature. I don’t want my device filling in passwords for me because it defeats the purpose of a password being “something I know”. The 2FA code is more like “something I have” and I’m okay with the device filling that in, but not the password.

There doesn’t currently seem to be a way to set up only the 2FA code for a site.

Re: Apple passwords deserve an app

#179
post #45

Earlier quoted context omitted.

With passkeys, now every platform can enjoy this level of lock in!

I hope not. I'm patiently waiting on 1Password to release their implementation of passkeys so I can have it work on all my devices, Apple or not.

Just use Passkeys. Any account that allows 2FA allows multiple second factors. You should be setting up backup second factors anyway if you don't want to risk getting permanently locked out of all of your accounts.

Plus, putting second factors in the same location as your first factor (e.g., 1Password) seems to pretty much defeat the entire purpose of having a second factor. If you're using strong passwords with 1Password, your second factor is basically only defending against a leak of your password database. If you're storing your second factor in that same password database, what are you gaining?

Re: Apple passwords deserve an app

#180

Am I the only person on Earth that needs sharing of passwords among my family? Any time folks bring up password solutions, they are always missing this requirement for me. 1Password is a life-saver in this regards. All my kids have their own vaults but for the little ones I have them use a shared vault between my wife and me so we have access to their passwords. I can also easily share passwords for services like Net…

>Am I the only person on Earth that needs sharing of passwords among my family?

I needed to share my Netflix password back in the day. My random alphanumerical 32-character password with special characters drove my family up the wall though. But in general, passwords are for personal use only.

Post reply on HN